Dashboard

In KUMA, you can configure the Dashboard to display the most recent information (or analytics) about KUMA processes. Analytics are generated using widgets, which are specialized tools that can display specific types of information.

The collections of widgets are called layouts. Administrators and analysts can create, edit, and delete layouts. You can also assign any layout as the default layout so that it is displayed when you open the Dashboard section.

The information in the Dashboard section is updated regularly as per layout configuration, but you can force an update by clicking the button at the top of the window. The time of last update is displayed near the window title.

The data displayed on the dashboard depends on the tenants that you can access.

Creating dashboard layout

To create a new layout:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and select Create layout.

   The New layout window opens.

3. In the Tenants drop-down list, select the tenants that will own the layout being created.
4. In the Period drop-down list, select the time period from which you require analytics:
   • 1 hour
   • 1 day (this value is selected by default)
   • 7 days
   • 30 days
   • In period—receive analytics for the custom time period. The time period is set using the calendar that is display when this option is selected.
5. In the Refresh every drop-down list, select how often data should be updated in layout widgets:
   • 1 minute
   • 5 minutes
   • 15 minutes
   • 1 hour (this value is selected by default)
   • 24 hours
6. In the Add widget drop-down list, select the required widget and configure its settings.

   You can add multiple widgets to the layout.

   You can also drag widgets around the window and resize them using the button that appears when you hover the mouse over a widget.

   You can edit or delete widgets added to the layout by hovering the mouse over them, clicking the icon that appears and selecting Edit to change their configuration or Delete to delete them from layout.

   • Adding widgets

     To add widget:

     1. Click the Add widget drop-down list and select required widget.

        The window with widget parameters opens. You can see how the widget will look like by clicking the Preview button.

     2. Configure widget parameters and click the Add button.
   • Editing widget

     To edit widget:

     1. Hover the mouse over the required widget and clicking the icon that appears.
     2. In the drop-down list select Edit.

        The window with widget parameters opens. You can see how the widget will look like by clicking the Preview button.

     3. Update widget parameters and click the Save button.
7. In the Layout name field, enter a unique name for this layout. Must contain from 1 to 128 Unicode characters.
8. Click Save.

The new layout is created and is displayed in the Dashboard section of the KUMA web interface.

Selecting dashboard layout

To select layout:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and select the required layout.

The selected layout is displayed in the Dashboard section of the KUMA web interface.

Selecting dashboard layout as a default

To set layout as a default:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and hover mouse over the required layout.
3. Click the icon.

The selected layout is become default layout.

Editing dashboard layout

To edit layout:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and hover mouse over the required layout.
3. Click the icon.
4. The Customizing layout window opens.
5. Make the necessary changes. The settings that are available for editing are the same as the settings available when creating a layout.
6. Click Save.

The layout is updated and is displayed in the Dashboard section of the KUMA web interface.

If the layout was deleted or assigned to a different tenant while you were making changes to it, an error will be displayed when you click Save. In this case, the layout will not be saved. Reload the page in your web browser to view the list of available layouts in the drop-down list in the upper-right corner.

Deleting dashboard layout

To delete layout:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and hover mouse over the required layout.
3. Click the icon and confirm this action.

The layout is deleted.

Preconfigured widgets

KUMA comes with a set of preconfigured layouts with widgets:

• Alerts Overview layout (Alert overview):
  • Active Alerts
  • Unassigned Alerts
  • Alerts distribution
  • Alerts by Assignee
  • Alerts by Status
  • Alerts count by rule
  • Alerts by Priority
  • Affected Assets
  • Affected Assets Categories
  • Affected Users
  • Latest Alerts
  • Top Log Sources by Alerts count
  • Top Log Sources by convention rate
  • Alerts by tenant
• Incidents Overview layout (Incidents overview):
  • Active incidents
  • Unassigned Incidents
  • Incidents distribution
  • Incidents by assignee
  • Incidents by Status
  • Incidents by Priority
  • Incidents by Tenant
  • Affected Assets in Incidents
  • Affected Assets Categories in Incidents
  • Affected Users in Incidents
  • Latest Incidents
• Network Overview layout (Network activity overview):
  • Top internal IP by Netflow Traffic Volume (BytesIn)
  • Top external IP by Netflow Traffic Volume (BytesIn)
  • Netflow top hosts for remote control (ports 3389, 22, 135)
  • Netflow total bytes by internal ports
  • Top Log Sources by Events count
  • Top Events categories
  • Assets count
  • Users count